Privacy notice

Data controller

The data controller is COCONUT di Baiocchi Ambra Agata, Via Cristoforo Colombo c/o PICIACIA - Spiaggia 46, 47814 Bellaria-Igea Marina (RN), VAT IT04256680408. For any question about your data you can write to info@barcoconut.it.

What data we process

Data you send us with the contact form: your full name, email address, phone number (optional), the text of your message, the language of the page, the date and time it was sent and the text of the consent you accepted.

Technical data: like any website, the server records the IP address, date and time, the page requested and the browser type of each visit, to run the site and protect it from abuse. When you send the form we also use your IP address to limit repeated sending.

Please do not include special categories of data (for example about your health) in your message, except where strictly necessary, for example to tell us about an allergy or intolerance.

Why we process them and on what legal basis

To reply to your message and handle your request: the legal basis is your request (Art. 6(1)(b) GDPR) and the consent you give with the checkbox (Art. 6(1)(a) GDPR), which you can withdraw at any time without affecting processing already carried out.

For the security of the site and to prevent spam and abuse: the legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

To comply with any legal obligations and, if necessary, to defend our rights in court (Art. 6(1)(c) and (f) GDPR).

We do not use your data for advertising, newsletters or profiling, and we make no automated decisions about you.

If you do not provide the data

Name, email, message and consent are needed to reply to you: without them the message cannot be sent. The phone number is optional.

How long we keep them

Messages are not stored on the website's server: they go straight to our mailbox (info@barcoconut.it, Google Workspace), where we keep them, together with our replies, for as long as needed to handle your request and in any case no longer than 24 months after the last contact, unless the law requires us to keep them longer or they are needed to defend our rights.

The IP address used to limit repeated sending is deleted within 24 hours. The server's technical logs are kept only as long as strictly necessary for security and then deleted.

Who can see the data

The data are processed by the controller and by persons authorised by the controller, who are bound by confidentiality.

We use providers that process data on our behalf as processors (Art. 28 GDPR): Google Ireland Limited, for the email mailbox (Google Workspace), and DigitalOcean LLC, for the server hosting the site, located in London (United Kingdom, a country for which the European Commission has adopted an adequacy decision).

Some providers may transfer data outside the European Economic Area, including to the United States: in such cases the transfer takes place with the safeguards provided by the GDPR, such as the EU-U.S. Data Privacy Framework or the standard contractual clauses approved by the European Commission.

We do not sell or share your data with third parties. We may disclose them to the authorities only when required by law.

Cookies and third-party services

This website uses no cookies, neither technical nor profiling ones, and no statistics or tracking tools. Fonts and images are hosted on our own server: opening the pages contacts no third-party service.

The links to Instagram and Facebook are plain links: nothing from those services is loaded until you open them. The ordering system at ordina.barcoconut.it is a separate service with its own privacy notice.

Your rights

At any time you can ask for access to your data, rectification, erasure, restriction of processing and portability, object to processing based on legitimate interest (Arts. 15–22 GDPR) and withdraw your consent. Just write to info@barcoconut.it: we reply within one month.

If you believe the processing breaks the law, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the country where you live or work.

Changes to this notice

We may update this notice, for example if the site's services or the law change. The version in force is always this page, with the date of the last update shown at the top.